REMARKS 

Please reconsider the claims in the application in view of the remarks below. Claims 1~ 
30 remain pending in the present application. 

Claim Rejection - 35 U.S.C. $112 , second p aragraph 

The Office Action rejected Claim 1 1 under 35 U.S.C, §112, second paragraph, as 
allegedly being indefinite because the preamble recites a "program storage device, tangibly 
embodying a program of instructions executable by a machine" while the body of the claim 
recites two machines. Without conceding to the propriety of the rejection, applicant is amending 
claim 1 1 to recite "machines." The rejection is now believed to be overcome. 

Claim Rejection - 35 U.S.C. $ 102(e) 

Claims 1-30 were rejected under 35 U.S.C. § 102(e) as allegedly being anticipated by U.S. 
Patent Publication No. 2003/0217288 ("Guo et al."). Applicant respectfully traverses the 
rejection. 

To anticipate a claim, the reference must teach every element of the claim, that is, the 
cited reference must disclose an identical invention. See, MPEP §2131. Guo et al. as understood 
by applicant discloses an authentication server that generates a ticket including information 
associated with a user after authenticating the user. Guo et al, however, does not disclose or 
suggest every element claimed in independent claim 1 , 

For example, Guo et al. fails to disclose or suggest at least "establishing a login account 
with login information at the client machine in response to the request; encrypting the login 
information at the client machine and communicating the encrypted login information to the user 
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machine" recited in claim 1 . The Office Action cites Guo et al.'s paragraphs [0032] and [0047] 
as allegedly disclosing those elements, Guo et al.'s paragraph [0032] discloses that user of client 
computer system and the operator of affiliate server register with authentication server prior to 
executing the authentication process, Guo et al/s paragraph [0047] discloses that the 
authentication server determines whether a user is authenticated and if not, accepts 
useraame/password via a user interface page, As is apparent, however, those passages do not 
disclose or suggest that login information is established at a client machine and that login 
information is encrypted at the client machine and communicated to the user machine. 

In addition, while the above reason suffices to overcome the section 102(e) rejection over 
Guo et ah, Guo et ah also does not disclose or suggest, "communicating the encrypted login 
information and authentication information associated with the user from the user machine to an 
authentication server; and decrypting the encrypted login information at the authentication server 
and communicating the decrypted login information to the user machine if the authentication 
information is acceptable to the authentication server" as further recited in independent claim L 
The Office Action cites paragraphs [0049-0050] as allegedly disclosing those elements. Those 
paragraphs disclose that a client computer is redirected to the web service at affiliate server and 
that the affiliate server decrypts the session ticket that the authentication server encrypted. 

On the other hand, claim 1 recites that the encrypted login information (that was 
communicated from the client machine to the user machine) is communicated to an 
authentication server from the user machine, Claim 1 further recites that the encrypted login 
information is decrypted at the authentication server and the decrypted login information is 
communicated back to the user machine. Again, as is apparent, Guo et ah does not disclose or 
suggest that its authentication server decrypts login information. Rather, Guo et al/s 
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authentication server encrypts the session key, which Guo et al.'s affiliate server decrypts in 
order to authenticate. 

Accordingly, for at least the above reasons, Guo et al does not anticipate independent 
claim 1 and its dependent claims at least by virtue of their dependencies. Independent claims 10 
and 1 1 recite the similar elements, and therefore, for at least the same foregoing reasons, Guo et 
al does not anticipate independent claims 10 and 11. 

Independent claims 12, 20, 21, 28, 29 and 30 also recite that an encrypted login 
information communicated from a client machine to the user machine is communicated to an 
authentication server that decrypts the login information. Therefore, for at least the same 
foregoing reasons, Guo et al. also does not anticipate independent claims 12, 20, 21, 28, 29 and 
30 and their respective dependent claims at least by virtue of their dependencies. 

In view of the foregoing, this application is now believed to be in condition for 
allowance, and a Notice of Allowance is respectfully requested. If the Examiner believes a 
telephone conference might expedite prosecution of this case, applicant respectfully requests that 
the Examiner call applicant's attorney at (516) 742-4343. 



Respectfully submitted, 




Eunhee Park 
Registration No.: 42,976 

Scully, Scott, Murphy & Presser, P.C. 
400 Garden City Plaza, Suite 300 
Garden City, N.Y. 11530 
(516) 742-4343 

EP:me 
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